Hot-keys on this page

r m x p   toggle line displays

j k   next/prev highlighted chunk

0   (zero) top of page

1   (one) first highlighted chunk

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

# -*- encoding: utf-8 -*- 

# 

# Copyright © 2012 New Dream Network, LLC (DreamHost) 

# 

# Licensed under the Apache License, Version 2.0 (the "License"); you may 

# not use this file except in compliance with the License. You may obtain 

# a copy of the License at 

# 

#      http://www.apache.org/licenses/LICENSE-2.0 

# 

# Unless required by applicable law or agreed to in writing, software 

# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT 

# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the 

# License for the specific language governing permissions and limitations 

# under the License. 

 

"""Access Control Lists (ACL's) control access the API server.""" 

from oslo_config import cfg 

 

from magnum.api.middleware import auth_token 

 

 

AUTH_OPTS = [ 

    cfg.BoolOpt('enable_authentication', 

                default=True, 

                help='This option enables or disables user authentication ' 

                'via keystone. Default value is True.'), 

] 

 

CONF = cfg.CONF 

CONF.register_opts(AUTH_OPTS) 

 

 

def install(app, conf, public_routes): 

    """Install ACL check on application. 

 

    :param app: A WSGI applicatin. 

    :param conf: Settings. Dict'ified and passed to keystonemiddleware 

    :param public_routes: The list of the routes which will be allowed to 

                          access without authentication. 

    :return: The same WSGI application with ACL installed. 

 

    """ 

    if not cfg.CONF.get('enable_authentication'): 

        return app 

    return auth_token.AuthTokenMiddleware(app, 

                                          conf=dict(conf), 

                                          public_api_routes=public_routes)